e86617551a181ef7ae82eb1d803e8b6e0b4c6a8bb416877af6d97d36f300faab

Analysis

max time kernel
148s
max time network
115s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/07/2026, 13:23

Target
2026-07-10_d2eac40558e73210f1a45167c26ca5b8_conti.exe
Size 132KB
Sample260710-qmvpract3v
SHA256 e86617551a181ef7ae82eb1d803e8b6e0b4c6a8bb416877af6d97d36f300faab
MD5 d2eac40558e73210f1a45167c26ca5b8
SHA1 911243c99daea0ad16cd315a3df2c823e96e82f6
SHA512 605019d97a3612deec294b8f3af569d2c535daba816aec30172e653699a239890e80b4dfc190db61442a7814cb41506313baee6558e4dbf7792e87a92d68a35a
SSDEEP 1536:Rt7Joe1Wxr9nakaqrD/a4RCMTSyo623mi5QRX7ZjiViBqZpKGQ7hdOJ4hxe89D3Z:RtVqRfaqrn5dh7hdOJ43TV/
TLSH
T10AD3F9C6BAC9ECEBCA06123488AB4329233DF7C54B8697134D3972351E136D0AED7657
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 3436 wrote to memory of 4408	3436	2026-07-10_d2eac40558e73210f1a45167c26ca5b8_conti.exe	88
PID 3436 wrote to memory of 2720	3436	2026-07-10_d2eac40558e73210f1a45167c26ca5b8_conti.exe	89

C:\Users\Admin\AppData\Local\Temp\2026-07-10_d2eac40558e73210f1a45167c26ca5b8_conti.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-10_d2eac40558e73210f1a45167c26ca5b8_conti.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3436
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c g++ ./modern_bat.cpp -o ./modern_bat.exe
  2⤵
  PID:4408
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c ./modern_bat.exe
  2⤵
  PID:2720